Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

When Your AI Can't Be Trusted Anymore | IdentityShield '26

Jan 30, 2026 By miniOrange In miniOrange
What if your ML system is running perfectly—but making the wrong decisions? This talk explores Ransomware 3.0, where attackers poison models and pipelines instead of locking systems, and shows how AI‑augmented attacks bypass traditional security and how to defend against silent ML compromise. Speaker: Avinish Thakur Software Engineer, miniOrange Pune, India.
View Video
CrowdStrike

How Agentic Tool Chain Attacks Threaten AI Agent Security

Jan 30, 2026 By Vanessa Villa In CrowdStrike
AI agents are rapidly transforming enterprise operations. Unlike traditional software that follows fixed code paths, AI agents interpret prompts, form plans, select tools, and react to results in a continuous loop. At the heart of this capability is the agent's ability to actively select and execute capabilities based on natural language descriptions, schemas, and examples.
Read Post
1Password

Security advisory for AI-assisted browsing interactions with the 1Password browser extension

Jan 30, 2026 By Andrew Hall and Drew Sen In 1Password
This advisory describes an ecosystem-level risk that emerges when AI agents are able to autonomously read and act on untrusted content while operating with user-level permissions in a web browser.
Read Post
gitguardian

Agentic AI and NonHuman Identities Demand a Paradigm Shift In Security: Lessons from NHIcon 2026

Jan 30, 2026 By Dwayne McDaniel In GitGuardian
In the race to innovate, software has repeatedly reinvented how we define identity, trust, and access. In the 1990's, the web made every server a perimeter. In the 2010's, the cloud made every identity a workload. Here in 2026, agentic AI makes every action autonomous.
Read Post
protecto

Agentic Data Classification: A New Architecture for Modern Data Protection

Jan 30, 2026 By Amar Kanagaraj In Protecto
In the evolving landscape of data protection and compliance, data classification is the bedrock of safe AI workflows. Yet legacy approaches rely on singular models that are fixed, rigid, and limited in context. Our agentic data classification approach reshapes this paradigm by not relying on any single model. Instead, we orchestrate a dynamic, intelligent layer that automatically selects the right model for the job.
Read Post
Featured Post
AI for Security Infrastructure: Rebalancing Cybersecurity for the Decade Ahead

AI for Security Infrastructure: Rebalancing Cybersecurity for the Decade Ahead

Jan 29, 2026 By Garrett Hamilton, CEO and Co-Founder In Reach Security
For more than a decade, cybersecurity has been shaped by a single doctrine: assume breach. Facing high-volume, relentless, and diverse attacks, the security industry has been forced into a reactive stance, playing a constant game of whack-a-mole in a nonstop damage-limitation exercise. This has driven major investment in detection, response, and recovery, and created a world in which organizations are better at reacting to incidents than at preventing them in the first place.
Read Post
appknox

Vibe Coding Speeds Up Mobile Apps But Creates New Security Risks

Jan 29, 2026 By Ginil P G In Appknox
AI-assisted development has crossed a tipping point. Mobile teams are no longer debating whether to use AI to write code. They are deciding how fast they can ship with it. This shift, often called vibe coding, prioritizes intent and speed over manual implementation. Developers describe what they want, and AI fills in the rest. Velocity improves. Releases accelerate. But security assumptions quietly break. For mobile applications, that risk compounds.
Read Post

Episode 7 - Practical AI for Zeek, MITRE, and Security Docs

Jan 29, 2026 By Corelight In Corelight
In Episode 7 of Corelight DefeNDRs, join me, Richard Bejtlich, as I sit down with Dr. Keith Jones, Corelight's principal security researcher, to discuss the practical applications of AI in enhancing network security. We delve into how large language models (LLMs) can assist in cleaning up documentation and generating Zeek scripts, sharing insights from our extensive experience in incident response and coding. Keith reveals the challenges and successes he has encountered using LLMs to streamline processes, including their role in analyzing MITRE techniques.
View Video
cloudflare

Introducing Moltworker: a self-hosted personal AI agent, minus the minis

Jan 29, 2026 By Celso Martinho In Cloudflare
The Internet woke up this week to a flood of people buying Mac minis to run Moltbot (formerly Clawdbot), an open-source, self-hosted AI agent designed to act as a personal assistant. Moltbot runs in the background on a user's own hardware, has a sizable and growing list of integrations for chat applications, AI models, and other popular tools, and can be controlled remotely. Moltbot can help you with your finances, social media, organize your day — all through your favorite messaging app.
Read Post
salt security

Measuring Agentic AI Posture: A New Metric for CISOs

Jan 29, 2026 By Eric Schwake In Salt Security
In cybersecurity, we live by our metrics. We measure Mean Time to Respond (MTTR), Dwell Time, and Patch Cadence. These numbers indicate to the Board how quickly we respond when issues arise. But in the era of Agentic AI, reaction speed is no longer enough. When an AI Agent or an MCP server is compromised, data exfiltration happens in milliseconds rather than days. If you are waiting for an incident to measure your success, you have already lost.
Read Post
nightfall

Beyond Pattern Matching: How AI-Native File Classification Solves Modern DLP Challenges

Jan 29, 2026 By Chris Martinez In Nightfall
Legacy DLP operates on a fundamental constraint: it identifies sensitive data by matching patterns. Credit card numbers follow the Luhn algorithm. Social Security numbers conform to a nine-digit format. API keys match specific string patterns. This approach works for structured data, but it fails to address a critical reality: Your most sensitive assets aren't numbers. They're documents.
Read Post
Forward Networks

Introducing Forward AI

Jan 29, 2026 By Forward Networks In Forward Networks
As enterprises move toward agentic operations, speed without data accuracy becomes a liability. At Forward Networks, we recognized this challenge and set out to deliver a solution: speed backed by mathematical accuracy. In networking, acting on incomplete or approximate data is not an inconvenience, it is a cause of outages, security exposure, and operational risk.
Read Post

AI is Actively LEAKING Your Data (And You Don't Know It) #apisecurity #airisks #dataprotection #ai

Jan 29, 2026 By Wallarm In Wallarm
AI agents don't think. They pattern-match. Critical to understand: Generative AI (ChatGPT, Claude, etc.) does NOT reason like humans. It: The API Security problem: When you give an AI agent access to an API, it will: AI agents can't reason. They recreate patterns based on weights. You need to be very careful: data in, data out. Practical example: text User: "Show me the account balance for user" AI agent → calls GET /api/account/123 API → returns { balance: 5000, name: "John", SSN: "123-45-6789" } AI agent → outputs EVERYTHING to user (including SSN!)
View Video

Introducing Forward AI

Jan 29, 2026 By Forward Networks In Forward Networks
The Network is Complex. Operating It Shouldn't Be. Forward AI transforms network operations by reducing manual analysis, expert dependency, and guesswork. By combining conversational interaction with a mathematically accurate digital twin, teams can validate intent, understand actual network behavior, and act with confidence across even the most complex environments.
View Video
gitguardian

OpenClaw (Moltbot) Personal Assistant Goes Viral - And So Do Your Secrets

Jan 29, 2026 By Guillaume Valadon In GitGuardian
Early 2026, Moltbot a new AI personal assistant went viral. GitGuardian detected 200+ leaked secrets related to it, including from healthcare and fintech companies. Our contribution to Moltbot: a skill that turns secret scanning into a conversational prompt, letting users ask "is this safe?".
Read Post
LimaCharlie

Threat hunting to detection engineering: Analyzing real malware with Claude Code, LimaCharlie, and Linux

Jan 29, 2026 By LimaCharlie In LimaCharlie
Claude Code, originally just auto-complete on steroids for IDEs, shows a lot of promise for becoming a major tool in the DFIR/detection engineering/security analyst’s toolbox. Whether it’s Claude Code’s support of MCP, agent skills, or general ability to quickly figure out how to accomplish a given task, it is rapidly becoming more than a code generation tool. This is the first of a three-part series.
Read Post

Semantic Guardrails for AI/ML - Protegrity AI Developer Edition

Jan 28, 2026 By Protegrity USA Inc. In Protegrity
In this installment of our AI Developer Edition Set-up series, Dan Johnson, a software engineer at Protegrity, introduces semantic guardrails. Learn how to protect your LLM and chatbot workflows from malicious prompts and insecure AI responses. As AI becomes central to enterprise operations, controlling the context of conversations is a major challenge. Semantic guardrails provide a safety layer that ensures your AI stays on topic and never leaks sensitive PII.
View Video

Agentic SecOps Workspace (ASW) office hours with LimaCharlie

Jan 28, 2026 By LimaCharlie In LimaCharlie
Join us for a special Defender Fridays Office Hours session where the LimaCharlie team demonstrates the new Agentic SecOps Workspace (ASW) and explores what's possible when AI agents operate security infrastructure directly. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.
View Video
sumologic

Sumo Logic's 2026 Security Operations Insights report: AI, siloed tools, and team alignment

Jan 28, 2026 By Zoe Hawkins In Sumo Logic
Security threats have always been expanding and evolving, but recent data shows that modern applications are more complex for security and operations than ever before. And AI is only a piece of that puzzle. To stay on top of the changing market and hear directly from security leaders on what’s really top of mind, Sumo Logic surveyed over 500 security leaders with the help of UserEvidence. We asked about data pipelines, tool sprawl, confidence in SIEM, and, of course, AI.
Read Post
upguard

Productivity at a Price: The Rising Cost of AI Convenience

Jan 28, 2026 By Shane Moosa In UpGuard
Humans have always sought to streamline productivity through the most convenient solutions available, prioritizing speed to stay ahead and gain an edge over the competition. From the assembly line to the cloud, the goal remains the same: do more with less friction. Today, that convenience is synonymous with AI. While these tools have revolutionized how we work, the reality remains that rapid innovation always comes with a hidden cost.
Read Post
Tines

Voice of Security 2026: AI is everywhere yet manual work persists

Jan 28, 2026 By Thomas Kinsella In Tines
AI adoption in security has soared. But for many teams, manual work and burnout remain stubbornly high. To understand why, and what security teams must do next, we partnered with Sapio research to survey more than 1,800 security leaders and practitioners worldwide for our Voice of Security 2026 report. We wanted to learn how teams are using AI and automation, how the role of security is evolving, and how professionals believe AI will impact their careers. The data is revealing.
Read Post
salt security

Stop Staring at JSON: How GenAI is Solving the API "Context Crisis"

Jan 28, 2026 By Eric Schwake In Salt Security
There is a moment that happens in every SOC (Security Operations Center) every day. An alert fires. An analyst looks at a dashboard and sees a UR: POST /vs/payments/proc/77a. And then they stop. They stare. And they ask the question that kills productivity: "What does this thing actually do?" Is it a critical payment gateway? A test function? Does it handle credit card numbers or just transaction IDs?
Read Post
nightfall

MCP & AI Agent Security: Addressing the Growing Data Exfiltration Vector

Jan 28, 2026 By Chris Martinez In Nightfall
The security landscape is shifting. For the past two years, security teams have focused primarily on what users type into chatbots by monitoring interactions with ChatGPT, Gemini, and Claude. But a new risk vector is emerging, one that operates largely outside traditional security controls: AI agents accessing corporate data autonomously through the Model Context Protocol (MCP).
Read Post
Zenity

From IDE to CLI: Securing Agentic Coding Assistants

Jan 28, 2026 By Ofir Pearl In Zenity
Today we’re excited to announce that Zenity now protects the most powerful, enterprise-critical coding assistants - Cursor, Claude Code, and GitHub Copilot - from build-time to runtime. As AI becomes a first-class developer tool, Zenity gives security teams the visibility and control they need to safely embrace coding assistants everywhere they’re used, in IDEs, CLIs or in the cloud.
Read Post
Reach Security Named a Representative Provider in Gartner® Innovation Insight for Automated Security Control Assessment (ASCA)

Reach Security Named a Representative Provider in Gartner® Innovation Insight for Automated Security Control Assessment (ASCA)

Jan 27, 2026 By Reach Security In Reach Security
According to Gartner, by 2030, organizations that successfully operationalize ASCA technologies will experience a 25% reduction in cybersecurity incidents.
Read Post
Teleport Introduces Agentic Identity Framework to Secure AI Agents in Production Infrastructure

Teleport Introduces Agentic Identity Framework to Secure AI Agents in Production Infrastructure

Jan 27, 2026 By Teleport In Teleport
Teleport announces the Teleport Agentic Identity Framework, an AI-centered framework that provides organizations with a clear roadmap for securely deploying agentic AI in production cloud and on-premises environments. The framework defines the policies, practices, developer tools, and reference architecture required to operate autonomous and semi-autonomous AI agents as trusted identities across modern infrastructure, securing infrastructure against risk of data compromise and from external adversarial threats.
Read Post
teleport

AI Infrastructure Needs an Agentic Identity Framework - We're Building It

Jan 27, 2026 By Ev Kontsevoy In Teleport
AI agents are about to cross a threshold. For infrastructure and security leaders, agentic AI is no longer an innovation topic but a production readiness problem. What started as sandboxed applications and tech demos at trade shows (bet you’ve seen a few of those) has morphed into long-running autonomous actors operating directly in production cloud and on-prem infrastructure. They read data, write code, deploy services, access databases, and make decisions continuously across environments.
Read Post
LimaCharlie

AI Action > AI Advice

Jan 27, 2026 By LimaCharlie In LimaCharlie
Sr. Technical Content Strategist From Advisory AI to Operational AI in Security Operations The early wave of AI SOC platforms has delivered mixed results. While AI proved its usefulness as a triage assistant and next-step remediation advisor, these benefits came with significant drawbacks. Foremost, the cost of outsourcing an AI SOC is significant. Medium enterprises could expect to pay anywhere from $120,000 – $360,000 a year for the service.
Read Post

Claude Code reads a threat report, hunts for IOCs, and deploys detection rules #cybersecurity #ai

Jan 27, 2026 By LimaCharlie In LimaCharlie
From threat intelligence article to deployed coverage. The AI agent extracts indicators, searches for compromise across tenants, confirms clean status, then creates and tests detection rules for ongoing protection within your LimaCharlie environment.
View Video
protecto

A Step-by-Step Guide to Enabling HIPAA-Safe Healthcare Data for AI

Jan 27, 2026 By Anwita In Protecto
Healthcare organizations are under immense pressure to improve care quality, reduce costs, and operate more efficiently. AI is speeding and simplifying all activities and is integrated across most workflows. But there’s a tradeoff: the moment patient data enters an AI workflow, your HIPAA obligations intensify. HIPAA violations are not theoretical.
Read Post
kovrr

How Organizations Should Prioritize AI Security Risks

Jan 27, 2026 By Kovrr In Kovrr
‍ ‍Artificial intelligence (AI) systems and GenAI tools are no longer merely being experimented with in the market. Instead, they are being embedded into the organizational infrastructure at large, shaping how enterprises process data, automate decisions, and provide core services to customers. Unfortunately, while this integration increases efficiency, it simultaneously increases exposure to a dramatic extent.
Read Post
veracode

How to Implement AI Code Generation Securely in Your SDLC

Jan 27, 2026 By Natalie Tischler In Veracode
AI adoption is no longer a future state; it’s the current reality. According to the 2025 Stack Overflow Developer Survey, 84% of respondents are using or planning to use AI tools in their development process. But speed without guardrails creates debt, and in the case of AI, it creates security debt at an alarming rate. Recent data shows that nearly half of the time, AI assistants are likely introducing risky, known vulnerabilities directly into your codebase.
Read Post
cyberark

Are we trusting AI too much?

Jan 27, 2026 By David Higgins In CyberArk
Gone are the days when attackers had to break down doors. Now, they just log in with what look like legitimate credentials. This shift in tactics has been underway for a while, but the rapid adoption of artificial intelligence is adding a new layer of complexity. AI is a powerful tool, but our growing reliance on it comes with a catch: it’s eroding our critical thinking skills.
Read Post
reach security

Reach Security Recognized as a Representative Provider of ASCA in the Gartner Innovation Insight: Automated Security Control Assessment

Jan 27, 2026 By John Dominguez In Reach Security
In its January 2026 research report, Innovation Insight: Automated Security Control Assessment, Gartner discusses why misconfigured security controls remain one of the most persistent drivers of breaches and why automation is now required to address the problem at scale.
Read Post
cyberark

EP 24 - FOMO, identity, and the realities of AI at scale

Jan 27, 2026 By CyberArk In CyberArk
In this episode of Security Matters, host David Puner sits down with Ariel Pisetzky, chief information officer at CyberArk, for a candid look at the fast‑evolving intersection of AI, cybersecurity, and IT innovation. As organizations race to adopt AI, the fear of missing out is driving rapid decisions—often without enough consideration for identity, security, or long‑term impact.
Read Post
persona

Safe agentic commerce starts with KYA and dynamic IDV

Jan 26, 2026 By Ross Freiman-Mendel In Persona
Product, fraud, and trust and safety teams at online merchants and marketplaces have been fighting bots for a long time. While there were occasional disagreements about how “bad” bots were (a purchase is a purchase, some might say), the general consensus often ranged from suspicious to block them all. But not anymore. As AI-powered browsers and agents become more commonplace, online merchants have to prepare for a world where agentic commerce is a standard sales channel.
Read Post

Why CVEs Alone Don't Explain Risk | Ed Amoroso & Garrett Hamilton on Actionable Security

Jan 26, 2026 By Reach Security In Reach Security
Vulnerability data isn’t the starting point. Context is. Ed Amoroso and Garrett Hamilton unpack why CVEs on their own don’t explain risk. What matters first: ⇢ What assets actually exist⇢ How controls are deployed and configured⇢ What the live posture looks like, not last month’s report With that context in place, vulnerabilities stop being noise and start becoming decisions. Garrett also makes a critical point near the end: many security tools are excellent at producing findings, but far less effective at helping teams resolve them.
View Video
riscosity

The Strengths and Shortcomings of AI Control Tower

Jan 26, 2026 By Anirban Banerjee In Riscosity
This is why platforms like ServiceNow AI Control Tower are showing up in governance roadmaps. Control Tower helps organizations standardize how AI systems are requested, reviewed, cataloged, and managed across their lifecycle. It can bring order to chaos. But there’s a second, equally important reality: the strongest governance workflow in the world can’t govern what it can’t see.
Read Post

GLM 4.7 vs. The Giants: Is This the New King of AI Coding?

Jan 26, 2026 By Snyk In Snyk
Can a lesser-known model compete with the likes of OpenAI, Google, and Anthropic? In this video, we put Z.ai’s GLM 4.7 to the ultimate test. We task it with building a production-ready, secure Node.js note-taking application from a single prompt to see if its code quality and security stand up to the big name foundational models.
View Video
WatchGuard

Data Privacy: How Organizations Protect the Workplace From AI Threats

Jan 25, 2026 By The Editor In WatchGuard
Data privacy in the workplace is not just compliance. It is how an organization protects employees, builds trust, and reduces business risk. Employees handle most workplace data, which makes them a major target for AI-powered threats like deepfakes and business email compromise (BEC). The best way to protect data is a mix of practical employee habits, realistic training, and strong controls like least privilege access, MFA, monitoring, and email authentication.
Read Post
protecto

How Protecto Delivers Format Preserving Masking to Support Generative AI

Jan 23, 2026 By Anwita In Protecto
Generative AI systems are designed to work with real data that expects structure, rely on patterns, and infer meaning from formats, relationships, and consistency across inputs. While real data facilitates better outputs and advanced training, making these systems useful has a tradeoff – it carries privacy, security, and compliance risk. This puts business on a difficult conundrum – either you block sensitive data entirely and lose context, or accept the privacy risks of using real data.
Read Post

How to Protect Your AI Agents from Invisible Risks? | IdentityShield '26

Jan 23, 2026 By miniOrange In miniOrange
AI agents power innovation but face hidden hacks, leaks, and tricks. This session uncovers 7 key risks, like cyberattacks, insider threats, bias abuse, and rogue actions, with best practices and real demo videos. Speaker: Vipika Kotangale Technical Content Writer, miniOrange Pune, India.
View Video
vanta

How to choose the right AI standard: A 7-point guide

Jan 23, 2026 By Vanta In Vanta
AI adoption has accelerated across sectors today as the technology becomes easier to access and deploy. Most organizations embed it in at least one aspect of their daily operations, but doing so has also introduced new risks, such as model bias and outcome drift. ‍ There’s a growing gap between AI use and responsible oversight, and keeping up demonstrable AI governance practices is a challenge.
Read Post
7 AI Video Tools Security Teams Are Using for Training and Awareness Campaigns

7 AI Video Tools Security Teams Are Using for Training and Awareness Campaigns

Jan 23, 2026 By SecuritySenses In SecuritySenses
Security awareness isn't just about policies and procedures anymore. Modern security teams know that engaging visual content dramatically improves message retention and behaviour change among employees. The challenge has always been production. Creating professional training videos and awareness content traditionally required budgets and expertise most security departments don't have. Static presentations and wall-of-text emails get ignored, but quality alternatives seemed out of reach.
Read Post
The Hidden Security Risk of Enterprise Documents and Why AI Amplifies It

The Hidden Security Risk of Enterprise Documents and Why AI Amplifies It

Jan 23, 2026 By SecuritySenses In SecuritySenses
For years, enterprise security strategies have evolved around visible and measurable threats: network intrusions, endpoint compromise, identity misuse, and cloud misconfigurations. These domains are well understood, heavily monitored, and continuously audited. Yet one of the most critical security risk surfaces in modern enterprises remains largely under-governed: documents and unstructured data.
Read Post
Featured Post
The new-age SOC analyst in 2026: tier 1.5

The new-age SOC analyst in 2026: tier 1.5

Jan 22, 2026 By Kirsty Paine, Field CTO & Strategic Advisor In Splunk
The role of the tier 1 SOC analyst has always been critical. It's the function responsible for holding the line day-to-day and responding when incidents happen. It's also the training ground for analysts, training them in a wide range of basics to prepare them to advance to tier 2. It's a role that has never been static but with the pace of change noticeably faster than ever before, the role of the tier 1 SOC analyst is evolving once again.
Read Post
knowbe4

AI Literacy Training: From Best Practice to Legal Requirement Under the New EU AI Act

Jan 22, 2026 By John Just In KnowBe4
For those of you who are like me, when I first heard about the new EU AI Act, I had flashbacks to the implementation of the General Data Protection Act (GDPR) back in 2018. There are certainly a lot of similarities with the EU leading the way in consumer protections that will likely lead to more, similar legislation across the globe. I’m also reminded of the iPhone when it was introduced in the consumer market and bled into the workplace (I for one held onto my Blackberry for as long as I could).
Read Post

Agentic SecOps Workspace demo: AI agents operating inside LimaCharlie

Jan 22, 2026 By LimaCharlie In LimaCharlie
LimaCharlie CEO/Founder, Maxime Lamothe-Brassard, walks through LimaCharlie's Agentic SecOps Workspace in this demo, showing how AI agents can directly operate security infrastructure using the platform's complete API coverage. What you'll see.
View Video
graylog

How to Ignore Cybersecurity AI Bubble FOMO

Jan 22, 2026 By The Graylog Product Team In Graylog
Cybersecurity teams are no longer circling an AI bubble. Rather, they are staffing inside it, buying within it, and getting measured by it. This matters because bubbles create a predictable trap: expectations are set higher than teams truly can deliver. Cato Networks CEO Shlomo Kramer recently told Business Insider the market is experiencing an AI bubble driven by heavy investment and AI-driven profit improvements, which he expects to unwind. A correction will not pause attacker activity.
Read Post
tigera

Ingress Security for AI Workloads in Kubernetes: Protecting AI Endpoints with WAF

Jan 22, 2026 By Veronika Smolik In Tigera
For years, AI and machine learning workloads lived in the lab. They ran as internal experiments, batch jobs in isolated clusters, or offline data pipelines. Security focused on internal access controls and protecting the data perimeter. That model no longer holds. Today, AI models are increasingly part of production traffic, which is driving new challenges around securing AI workloads in Kubernetes.
Read Post
1Password

As AI supercharges phishing scams, 1Password introduces built-in protection

Jan 22, 2026 By Elaine Atwell In 1Password
Phishing attacks are everywhere these days. People encounter them while shopping, job hunting, reading work emails, and checking personal texts. Thanks to AI-powered scammers, phishing has become both more common and harder to spot, leading to disastrous consequences. A phishing attack on a business costs an average of $4.8 million, and attacks on individuals can drain bank accounts and wreck credit scores.
Read Post
Torq

Context, Memory, and Learning in the AI SOC

Jan 22, 2026 By Torq In Torq
Everyone’s chasing a smarter agent. But the model was never what held the SOC back. The sharpest LLM still won’t know your environment, your team’s past calls, or where they draw the line on risk. That lives in the layer beneath the agents: context, memory, and learning. Torq’s AI research team breaks down how we build it.
Read Post
AI for Influencer Marketing: Smart Ways to Scale Content and Engagement

AI for Influencer Marketing: Smart Ways to Scale Content and Engagement

Jan 22, 2026 By SecuritySenses In SecuritySenses
Influencer marketing continues to dominate the digital landscape, but creating consistent, high-quality content remains one of the biggest challenges for creators and brands alike. The pressure to post regularly while maintaining authenticity and engagement can be overwhelming. This is where artificial intelligence steps in, offering practical solutions that help influencers scale their content production without sacrificing quality or burning out.
Read Post

Cyberhaven Product Launch: Uniting DSPM & DLP to Secure Data in the AI Era

Jan 21, 2026 By Cyberhaven In Cyberhaven
AI is rewriting data risk. On Feb 3, see how to fight back. Every week, AI makes your team faster—and your data more exposed. Files jump between new tools, models train on sensitive inputs, and traditional DLP is blind to the context that matters most. On February 3 at 11:00 AM PST, we’re pulling back the curtain on Cyberhaven’s unified DSPM & DLP platform—and showing how a single, AI‑native platform can finally keep up with how data actually moves.
View Video
Zenity

Seeing What AI Touches: Introducing Data Lens

Jan 21, 2026 By Greg Zemlin In Zenity
Security teams are entering a new phase of risk driven by the combination of AI agents and broad access to internal and external data. Agents are no longer limited to responding to prompts. They read files, pull documents from shared repositories, query external sources, and move information across systems on behalf of users. This shift brings real business value. Knowledge becomes easier to access, workflows move faster, and information that once required deliberate effort can be surfaced instantly.
Read Post
knowbe4

AI-Assisted Social Engineering is a Growing Concern

Jan 21, 2026 By KnowBe4 Team In KnowBe4
A survey by the World Economic Forum (WEF) found that 47% of organizations cite the advancement of adversarial capabilities as their top concern surrounding generative AI. These capabilities include phishing, malware development, and deepfakes, all of which are increasingly accessible due to AI tools. Additionally, 42% of organizations experienced a successful social engineering attack last year, and the researchers expect this number to rise as AI-assisted social engineering grows more advanced.
Read Post

2026 SIA Megatrends - AI is Eating Software

Jan 21, 2026 By Brivo In Brivo
Like many in our industry, we wrapped up 2025 by digging into the Security Industry Association’s (SIA) annual megatrends report. Rather than just another predictions list, the 2026 SIA Security Megatrends report offers a strategic roadmap from industry trailblazers who have mapped out the specific shifts in physical security trends we can expect in 2026. As we enter the early days of a fresh year, we sat down with Brivo Founder and President Steve Van Till, who had a hand in shaping this year's topics, to get his insider take on the findings.
View Video
safeaeon

Why AI SOC Is Becoming Standard for MSP Security Operations in 2026

Jan 21, 2026 By SafeAeon Inc. In SafeAeon
Managed service providers (MSPs) manage multiple client environments at the same time. It’s not an easy task, as threats move quickly and alerts never stop. It poses a big challenge for human-only SOC teams to handle such huge volumes of alerts and threats. This is where AI SOC changes how security operations are conducted for MSPs. An AI SOC uses artificial intelligence to monitor activity and identify threats in real-time.
Read Post
lookout

Understanding the LLM Mobile Landscape in Enterprise Technology

Jan 21, 2026 By Lookout In Lookout
Mobile security has always been complex, but LLM technology has added a whole new dimension to the field. Behind every popular generative AI (genAI) tool is a comprehensive large language model (LLM) that provides data and parses queries in natural language. When used responsibly, LLMs can be useful tools for ideation and content generation. In the wrong hands, though, LLMs can help threat actors supercharge their social engineering scams.
Read Post

Why Measuring Security ROI Matters

Jan 21, 2026 By Reach Security In Reach Security
Security investment only matters if it can be measured. In this roundtable, Josh Jones makes a straightforward point: security leaders need a way to quantify whether their investments are actually producing outcomes that can be explained to executives and boards. That challenge isn’t about buying more tools. It’s about answering basic questions: What are our tools actually doing? Where are controls misaligned or underused?
View Video
How AI is boosting Automation Processes

How AI is boosting Automation Processes

Jan 21, 2026 By SecuritySenses In SecuritySenses
Artificial intelligence seemingly came out of nowhere a couple of years ago, and now most of us use it in some capacity, especially if we are business owners, but the fact is, AI did not really come out of nowhere - it was years in the development and the next natural step to technology and automation processes that were already in place.
Read Post
mend

Introducing Mend.io's AI Security Maturity Survey + Compliance Checklist available today

Jan 20, 2026 By Tiffany Jennings In Mend
Today, we’re excited to launch two practical tools to help teams quickly understand their AI maturity, quantify AI risk, and gather the evidence executives will ask for in 2026: an interactive AI Security Maturity Survey (with a personalized score and mapped recommendations) and a companion AI Security Compliance Checklist. Both are aligned to industry standards and built to be immediately useful in discovery, audits, and planning.
Read Post
protecto

Why Protecto Uses Tokens Instead of Synthetic Data

Jan 20, 2026 By Anwita In Protecto
On the surface, synthetic data looks like the safer option. It’s not real. It doesn’t point to an actual person. It can be reversed if needed. And it keeps systems running without exposing sensitive values. That logic makes sense. Until you look at how systems actually behave. Protecto supports both reversible synthetic data and tokenization. Referential integrity can be preserved either way. Mapping back is not the hard part. The difference is not whether you can recover the original value.
Read Post

What is Vibe Coding? #vibecoding #aisecurity #coding

Jan 20, 2026 By Mend In Mend
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
View Video
Zenity

Securing AI Where It Acts: Why Agents Now Define AI Risk

Jan 20, 2026 By Chris Hughes In Zenity
In the first round of the AI gold rush, most conversations about AI security centered on models: large language models, training data, hallucinations, and prompt safety. That focus made sense when AI was largely confined to generating text, images, or recommendations. But that era is already giving way to something far more consequential.
Read Post
kovrr

Ensuring Institutional AI Ownership With the AI Compliance Officer

Jan 20, 2026 By Kovrr In Kovrr
‍Artificial intelligence (AI) systems and generative AI (GenAI) tools have already been embedded across enterprise operations in a myriad of ways that trigger compliance obligations, both in terms of AI-specific regulations and other reporting mandates. In many cases, this adoption is occurring informally, through employee-driven tools or AI features embedded within third-party platforms, without centralized visibility or approval.
Read Post
LimaCharlie

Everyone advertises AI. LimaCharlie built an Agentic SecOps Workspace.

Jan 20, 2026 By LimaCharlie In LimaCharlie
Sr. Technical Content Strategist Transparency is a core value for LimaCharlie. It’s reflected in our high-visibility platform, unopinionated integrations, and publicly available pricing structure. So rather than vaguely claiming AI capabilities, as many vendors do, we’ll explain how LimaCharlie facilitates agentic SecOps and why it matters to you. The Agentic SecOps Workspace is a security platform where AI doesn’t just assist operators, but operates alongside them.
Read Post

How to Measure Configuration Drift (And Why Alerts Get Ignored)

Jan 20, 2026 By Reach Security In Reach Security
Configuration drift isn’t just “change.” It’s unmanaged change. Let's get practical about how teams should actually measure drift: ⇢ What type of change occurred⇢ How often those changes happen⇢ How critical they are in real context⇢ And—most importantly—how teams respond Volume alone isn’t the metric that matters. If changes pile up without response, alerts get ignored—and drift quietly becomes exposure.
View Video
protecto

When Your AI Agent Goes Rogue: The Hidden Risk of Excessive Agency

Jan 20, 2026 By Protecto In Protecto
In Oct 2025, a malicious code in AI agent server stole thousands of emails with just one line of code. The package, called postmark-mcp, looked completely legitimate. It worked perfectly for 15 versions. Then, on version 1.0.16, the developer slipped in a tiny change. every outgoing email now included a hidden BCC to an attacker-controlled address. By the time anyone noticed, roughly 300 organizations had been compromised. Password resets, invoices, customer data, internal correspondence.
Read Post
upguard

Emerging Risks: Typosquatting in the MCP Ecosystem

Jan 20, 2026 By Greg Pollock In UpGuard
Model Context Protocol (MCP) servers facilitate the integration of third-party services with AI applications, but these benefits come with significant risks. If a trusted MCP server is hijacked or spoofed by an attacker, it becomes a dangerous vector for prompt injection and other malicious activities. One way attackers infiltrate software supply chains is through brand impersonation, also known as typosquatting—creating malicious resources that closely resemble trusted ones.
Read Post

The term "AI Agent" is failing us. #cybersecurity #ai #technews

Jan 20, 2026 By Teleport In Teleport
The term "AI Agent" is failing us. In Prediction, Ev warns that our vocabulary is lagging behind the technology. Calling everything an "AI Agent" is like calling everything "software." It’s too broad to be useful. A browser plugin has a completely different architecture than a microservice or a factory robot. They have different identities, different risks, and different security needs. You can't secure what you can't specifically identify.
View Video
LimaCharlie

LimaCharlie Announces Agentic SecOps Workspace, Redefining AI in Security Operations

Jan 20, 2026 By LimaCharlie In LimaCharlie
Sr. Technical Content Strategist LimaCharlie is announcing their Agentic SecOps Workspace, a security platform that elevates AI from an advisory role to an operational one. This is a key development for security teams who recognize that AI must offer more than chat interfaces, simple alert triage or next-step recommendations. To keep pace with modern threats and business needs, AI must be allowed to operate and scale.
Read Post
Why AI-Driven Business Idea Discovery Makes More Sense

Why AI-Driven Business Idea Discovery Makes More Sense

Jan 20, 2026 By SecuritySenses In SecuritySenses
Finding the right business idea is one of the hardest parts of starting a business. Most people don't struggle because they lack motivation. They struggle because they don't know what kind of business actually suits them. A quick online search gives thousands of ideas: e-commerce, SaaS, content creation, agencies, coaching, marketplaces, and more. But very few of these sources help you answer a more important question.
Read Post
How Can Creative AI Tools Help You Design Personalized Security Awareness Posters?

How Can Creative AI Tools Help You Design Personalized Security Awareness Posters?

Jan 20, 2026 By SecuritySenses In SecuritySenses
The truth is, the majority of the security awareness poster are forgettable. You may have encountered them: stock image of a pad lock, some bold printed text with a warning about phishing emails, perhaps a stock image of a person staring at his/her laptop in a concerned manner. They also become part of the office walls like a beige paint, and no one really listens to them.
Read Post
Featured Post
Security's Next Turning Point Is the Workforce

Security's Next Turning Point Is the Workforce

Jan 20, 2026 By Ashley Rose, Co-founder & CEO of Living Security In SecuritySenses
Cybersecurity is entering a turning point. It has less to do with new tools than a new reality: the workforce has changed. For years, security programs assumed risk lived in systems, controls, and configurations. People were the variable managed through policies, training, and best-effort awareness. That model was already under strain. Now it is being outpaced.
Read Post
Tensorway: Redefining AI Software for Mission-Critical Applications

Tensorway: Redefining AI Software for Mission-Critical Applications

Jan 20, 2026 By SecuritySenses In SecuritySenses
AI software is no longer limited to experiments, internal tools, or innovation labs. Today, it operates at the core of mission-critical systems - influencing financial decisions, controlling industrial processes, supporting healthcare workflows, and enabling real-time risk assessment. In these environments, failure is not an option, and reliability matters more than novelty.
Read Post
protecto

Why Protecto Privacy Vault Is Ideal for Masking Structured Data

Jan 19, 2026 By Amar Kanagaraj In Protecto
Picture this. You’re a data engineer at a healthcare company with millions of patient records in Snowflake. HIPAA requires you to protect PII before sharing data with researchers or running analytics. So you tokenize the data. And your system catches fire. Your joins break. Your ETL pipelines fail. BI dashboards return wrong results. ML model training jobs crash. All because something fundamental changed about your data architecture.
Read Post
kroll

AI Strategy: Building a Future-Proof Framework

Jan 19, 2026 By Kroll In Kroll
Artificial intelligence (AI) adoption is fast becoming a strategic necessity for modern businesses. With adoption continuing at pace, a carefully considered strategy is essential for gaining or maintaining a competitive advantage, managing downside risk and addressing the continued regulatory, legal, ethical and operational complexities presented by AI.
Read Post

Testing MiniMax M2.1 for AI Coding: The Results Might Surprise You

Jan 19, 2026 By Snyk In Snyk
Can "lesser-known" AI models actually keep up with the giants like Google, OpenAI, and Anthropic? In today’s video, we put MiniMax M2.1 to the ultimate test: building a production-ready, secure Node.js note-taking application from a single prompt. We’ll explore how to access MiniMax natively in the Windsurf IDE, walk through the debugging process for common errors (like environment variables and OS-specific dependencies), and perform a deep-dive security audit using Snyk. Stick around until the end to learn how to integrate MiniMax M2.1 into VS Code using OpenRouter.
View Video

Top 3 Skills for AI Security in 2026 #shorts

Jan 19, 2026 By Protecto In Protecto
Are your cybersecurity skills ready for the AI era? In this clip, we reveal which traditional security frameworks still work and the one new mental shift you need to survive. It’s not just about code anymore—it’s about "Socio-Technical" thinking. Raji (Microsoft AI Security) breaks down exactly how to future-proof your career.
View Video

Why Vulnerability Management Falls Short - And How Exposure Management Fixes It

Jan 19, 2026 By Reach Security In Reach Security
Vulnerability management identifies weaknesses. Exposure management helps prioritize them based on real-world risk and context. Ed and Garrett unpack why traditional vulnerability programs struggle to drive real risk reduction. The challenge isn’t discovery. It’s prioritization and follow-through. Too often, vulnerabilities are treated as isolated IT tasks—handed off, tracked by SLAs, and stripped of the context that explains why they matter in the first place.
View Video

The Asymmetric Threat: Why AI API Traffic is Hard to Predict

Jan 19, 2026 By A10 Networks In A10 Networks
The Asymmetric Threat: Why AI API Traffic is Hard to Predict As AI becomes more integrated into business operations, the way data moves through APIs is changing. In this clip from the A10 Networks webinar, "APIs are the Language of AI: Protecting Them is Critical," experts Jamison Utter and Carlo Alpuerto break down the concept of data asymmetry in AI.
View Video
How CEOs are turning AI investment into a competitive advantage

How CEOs are turning AI investment into a competitive advantage

Jan 19, 2026 By SecuritySenses In SecuritySenses
Artificial intelligence has moved quickly from experimentation to expectation. In many organisations, the question is no longer whether to invest, but how to turn investment into advantage that is durable, measurable, and defensible. The early wave of AI activity produced a familiar pattern: plenty of pilots, proofs of concept, and internal demos, but fewer examples of sustained value at scale. In 2025, that gap is narrowing. More leadership teams are treating AI as a core capability rather than a side project, and they are building the structures needed to capture value repeatedly, not just once.
Read Post
10 AI Trends Reshaping Digital Marketing Strategies

10 AI Trends Reshaping Digital Marketing Strategies

Jan 17, 2026 By SecuritySenses In SecuritySenses
Modern marketing is basically a result of technology, innovation, and human insight coming together. The brands that are the leaders in their industries are the ones that use the new tools extensively and, at the same time, build real relationships with their audiences. Artificial intelligence is the use that has become the main factor of this change very soon.
Read Post
CrowdStrike

The Architecture of Agentic Defense: Inside the Falcon Platform

Jan 16, 2026 By Elia Zaitsev In CrowdStrike
The architectural divide in cybersecurity is no longer theoretical. It's operational. Adversaries are deploying AI-accelerated attacks and moving laterally across domains faster than human analysts can correlate evidence. Meanwhile, defenders are adopting AI tools that accelerate individual tasks but still operate on fragmented data and require manual correlation across disconnected systems.
Read Post
cyberark

What's shaping the AI agent security market in 2026

Jan 16, 2026 By Shay Saffer In CyberArk
For the past two years, AI agents have dominated boardroom conversations, product roadmaps, and investor decks. Companies made bold promises, tested early prototypes, and poured resources into innovation, with analysts projecting an economic impact of $2.6 trillion to $4.4 trillion. As 2026 begins, the experimentation phase ends and the production era starts as organizations roll out AI agents at scale across their enterprises.
Read Post
egnyte

Egnyte Joins Anthropic to Bring Secure, Responsible AI to Financial Services

Jan 16, 2026 By Niamh Conlon In Egnyte
Egnyte is proud to partner with Anthropic in the next phase of Claude for Financial Services—making it easier than ever for sales, investment, and compliance teams to bring their content, context, and institutional knowledge directly to Claude with governed, secure access. As financial institutions race to unlock insights from decades of documents, models, and market data, the challenge has never been simply access.
Read Post

Configuration Drift: Why 99% of Cloud Failures Are Customer-Caused

Jan 16, 2026 By Reach Security In Reach Security
"Gartner estimates that 99% of cloud security failures through 2025 will be the customer's fault, primarily due to misconfigurations." Don’t become part of the statistic. Take our configuration drift product tour for a spin. Consider it some light work before the weekend. Most breaches don’t stem from cloud provider failures, but from customer-side issues like misconfigurations, weak identity controls, and unmanaged change.
View Video

AI in Cybersecurity: Force Multiplier or Just More Noise? #podcast #aisecurity #aicybersecurity

Jan 16, 2026 By SafeBreach In SafeBreach
Is AI actually making security teams safer—or just adding more noise? In this episode of IEN's Security Breach podcast, SafeBreach CTO Itzik Kotler joins Jeff Reinke to break down how attackers are using AI, why alert fatigue keeps getting worse, and what security teams should focus on before chasing the next “shiny object.” This conversation is a grounded take on preparation, detection engineering, and using AI intentionally—not reactively.
View Video

AI vs. Legacy Systems: Why Your Old Documentation Isn't Safe

Jan 16, 2026 By A10 Networks In A10 Networks
AI vs. Legacy Systems: Why Your Old Documentation Isn’t Safe In this A10 Networks discussion, "APIs are the Language of AI: Protecting Them is Critical," security experts Jamison Utter and Carlo Alpuerto tackle one of the most overlooked threats in modern IT: the "specter in the shadow." For years, many organizations relied on "security through obscurity"—the idea that if a system is old or undocumented, it's safe from attackers. However, AI has changed the rules. These systems can now decipher legacy documentation and communicate with obscure systems faster than a human ever could.
View Video
appguard

AppGuard Critiques AI Hyped Defenses; Expands its Insider Release for its Next-Generation Platform

Jan 15, 2026 By AppGuard
A new Top 10 Cybersecurity Innovators profile by AppGuard has been released, spotlighting growing concerns over AI-enhanced malware. AI makes malware even more difficult to detect. Worse, they use AI to assess, adapt, and move faster than any cyber stack can keep up. The report advocates for a fundamental change in approach, highlighting the limitations of reactive security measures. Rather than constantly adding or changing detection layers of cyber stacks, the profile emphasizes the importance of reducing endpoint attack surface-a perspective that challenges conventional industry practices.
Read Post

Meet GitGuardian's Machine Learning-Powered Risk Scoring

Jan 15, 2026 By GitGuardian In GitGuardian
The GitGuardian Platform now automatically ranks every secrets incident with a risk score from 0–100, turning alert floods into a prioritized, trustworthy work queue. Scores are computed from incident context (like validity, exposure, where it was found, and exploitability) and build on existing ML capabilities like Secret Enricher and our False-Positive Remover, which cuts false positives by 80%+.
View Video
apono

Why Did CrowdStrike Buy SGNL? It's all about AI

Jan 15, 2026 By Rom Carmel In Apono
Security powerhouse CrowdStrike made headlines this week with a major acquisition in the identity space with their purchase of SGNL for a reported $740 million. If you’re wondering why did CrowdStrike buy SGNL, you’re asking the right question. And you’re probably not alone. Over the past year, we’ve watched some of the largest security platforms in the world spend real money acquiring identity security companies.
Read Post
Tines

Introducing your AI interaction layer

Jan 15, 2026 By Yannick Gloster In Tines
AI is everywhere, but without a consistent and secure way to connect it to real systems, it remains fragmented, difficult to govern, and hard to scale. Today, we’re introducing your AI interaction layer. Tines unifies AI agents, copilots, and Model Context Protocol (MCP) servers and clients in a single, secure environment. It gives teams a practical way to connect AI to systems and put it to work seamlessly across operations.
Read Post
lookout

LLM Security Checklist: Essential Steps for Identifying and Blocking Jailbreak Attempts

Jan 15, 2026 By Lookout In Lookout
If your organization uses a private large language model (LLM), then it’s time to start thinking about countermeasures for jailbreaking. A jailbroken LLM can lead to leaked information, compromised devices, or even a large-scale data breach. Even more troubling: Jailbreaking LLMs is often as simple as feeding them a series of clever prompts. If your customers can access your LLM, your potential risk is even higher.
Read Post
sumologic

Token Torching: How I'd burn your AI budget (so you can fix it)

Jan 15, 2026 By David Girvin In Sumo Logic
I spend most of my time thinking like a criminal. Not because I’m edgy, but because that’s literally the job. And lately, everywhere I look, I see the same thing: People are exposing MCP endpoints like they’re REST APIs, and forgetting they’re actually money execution engines. So let’s talk about Token Torching. Yes, I invented another name. This isn’t data theft. It’s not taking your service down.
Read Post

The Right Business Outcomes #Protegrity #cybersecurity #datacentric #ai #datasecurity

Jan 15, 2026 By Protegrity USA Inc. In Protegrity
We are at an inflection point where AI, compliance, and quantum are exposing the dangerous fragility of traditional "envelope" security. The organizations that thrive in the next decade will be those that set their data free by embedding deterministic protection directly into the data itself. The organizations that lead the next decade won't just have better AI, they'll have better data security. Visit Protegrity.com to learn more.
View Video

The Data Scientist's Take: Making AI Work for the Enterprise

Jan 15, 2026 By SecurityScorecard In SecurityScorecard
In retrospect, it’s a lot easier to determine whether or not something has been overhyped. But for the moment? We’re bullish on agentic systems – and their adoption. Is your enterprise ready for the age of autonomous AI? Join Aleksandr Yampolskiy (CEO & Co-Founder, SecurityScorecard) and Ilya Mezyin (SVP, Head of Data Science, Dun & Bradstreet) for this discussion on: SecurityScorecard monitors and scores over 12 million companies worldwide. Find your company's security score for free at SecurityScorecard.com.
View Video
7 Smart Ways to Improve Security Monitoring With Automation

7 Smart Ways to Improve Security Monitoring With Automation

Jan 15, 2026 By SecuritySenses In SecuritySenses
Security can feel like a constant background concern for anyone who runs a startup or manages product delivery. One missed alert or late response can cause serious damage. Manual monitoring is no longer effective, as it doesn't scale well. Workers get tired, which causes logs to pile up and signals to be easily missed. That is why many businesses are turning to automation.
Read Post
New Cloudflare report warns of a 'Technical Glass Ceiling' stifling AI growth and weakening cybersecurity

New Cloudflare report warns of a 'Technical Glass Ceiling' stifling AI growth and weakening cybersecurity

Jan 14, 2026 By Cloudflare In Cloudflare
New research shows that organisations modernising apps are 3x more likely to see AI payoffs, while those clinging to legacy systems face rising security risks and developer talent shortages.
Read Post
Snyk

ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundations

Jan 14, 2026 By Stephen Thoemmes In Snyk
The recent disclosure of what security researchers are calling "the most severe AI-driven vulnerability uncovered to date" in ServiceNow's platform serves as a stark reminder: securing agentic AI isn't just about new AI-specific controls; it requires getting the fundamentals right first.
Read Post
cyberark

Beneath the AI iceberg: The forces reshaping work and security

Jan 14, 2026 By Omer Grossman In CyberArk
In conversations about AI, there’s a tendency to treat the future like a horizon we’re walking toward, always somewhere ahead, always a question of when. But if we look closely, the forces reshaping work, identity, and security beneath the surface are far more consequential than most people realize. More importantly, that reshaping is already happening.
Read Post

Arctic Wolf and AWS: AI-Powered SOC and Security Incident Response

Jan 14, 2026 By Arctic Wolf Networks In Arctic Wolf
Discover how Arctic Wolf partners with Amazon Web Services (AWS) to deliver cutting-edge, AI-powered Security Operations Center (SOC) capabilities and advanced security incident response solutions. This video explores how Arctic Wolf leverages AWS cloud infrastructure and artificial intelligence to provide: Learn how this powerful combination enhances your organization's security posture, reduces response times, and protects against evolving cyber threats through intelligent automation and comprehensive managed detection and response (MDR) services.
View Video

How Agentic AI Creates Shadow APIs: Security Risks Explained

Jan 14, 2026 By A10 Networks In A10 Networks
How Agentic AI Creates Shadow APIs: Security Risks Explained As businesses move from static applications to Agentic AI, the security landscape is shifting beneath our feet. In this clip from the A10 Networks webinar, "APIs are the Language of AI: Protecting Them is Critical," experts Jamison Utter and Carlo Alpuerto discuss a new frontier in cybersecurity: AI that builds its own APIs.
View Video

Stop buying niche tools to secure your AI. #cybersecurity #aisecurity #engineering

Jan 14, 2026 By Teleport In Teleport
In his first prediction for 2026, Ev explains why that strategy is about to fail. We used to let microservices run anonymously because we had bigger fires to fight. But when all software becomes autonomous AI, anonymity is a risk you can't afford. If your software behaves like a human, why separate it from your human identity strategy? The future isn't "NHI." It's a Unified Identity Layer where humans and non-humans are managed as equals.
View Video
How Security Teams Can Tackle Information Overload and Work Smarter

How Security Teams Can Tackle Information Overload and Work Smarter

Jan 14, 2026 By SecuritySenses In SecuritySenses
The modern security professional drowns in data every single day. Between threat intelligence reports, compliance documentation, vendor assessments, and incident logs, there's simply too much to read and not enough hours to read it. This isn't just frustrating. It's a genuine security risk. When critical information gets buried under mountains of PDFs and reports, threats slip through the cracks. The good news? There are practical strategies and tools that can help security teams cut through the noise. Let's explore how to manage this avalanche of information without burning out your team.
Read Post
knowbe4

AI Deepfakes Are Impersonating Religious Figures to Solicit Donations

Jan 13, 2026 By KnowBe4 Team In KnowBe4
WIRED reports that deepfake attacks are impersonating pastors and other religious figures in order to scam congregations. Father Mike Schmitz, a priest who hosts a podcast with over a million followers, warned his listeners in November that AI-generated deepfakes were using his likeness to fraudulently solicit donations. WIRED found that several of these fake accounts are still active on TikTok, and they appear when a TikTok user searches for Father Schmitz.
Read Post
bluevoyant

AI in the SOC

Jan 13, 2026 By Dan Petrillo In BlueVoyant
Gartner frames the AI SOC landscape as a dichotomy: providers pursuing full SOC replacement versus those building AI products to augment existing staff. Of these two approaches, only augmentation aligns with real-world security operations. It helps analysts triage alerts, investigate faster, enrich context, and summarize incidents with better consistency, all while keeping humans in the loop, even if their day-to-day efforts change.
Read Post
Arctic Wolf

From Dugouts to Data Lakes: Applying Moneyball to the AI SOC

Jan 13, 2026 By Arctic Wolf In Arctic Wolf
In AI-powered security, advantage comes not from automation alone, but from clear insight into how decisions are made. At Arctic Wolf, home to one of the world’s largest commercial security operations centers (SOC), we process over 10 trillion security events weekly. Rather than chasing automation for its own sake, we build AI that scales human expertise – preserving judgment where it matters most. But what is the optimal combination of humans and machines for security operations?
Read Post
protecto

Sensitive Data Is the Common Thread Across Most OWASP Top 10 Issues. Here's Why

Jan 13, 2026 By Anwita In Protecto
The OWASP Top 10 is usually presented as a list of technical failures. Broken access control. Injection. Insecure design. Misconfiguration. Each category points to something that went wrong in the application. What it doesn’t say explicitly is what was actually at risk when it went wrong. In most real incidents, the answer is not “the application.” It’s the data inside it. Sensitive data is the reason attackers care about OWASP failures in the first place. Credentials.
Read Post

Building Trust and Autonomy in the Age of Agentic AI - Saqib Khan, Global Field CIO at Tanium

Jan 13, 2026 By Tanium In Tanium
Speaking with iTnews, Saqib Khan, Global Field CIO at Tanium, explores how real-time, trustworthy endpoint data forms the foundation of Agentic AI. He explains why confidence in data sources is key to enabling autonomous decision-making, reducing incidents, and driving faster, more reliable outcomes across IT and cybersecurity environments.
View Video
graylog

Using LLMs, CVSS, and SIEM Data for Runtime Risk Prioritization

Jan 13, 2026 By Jeff Darrington In Graylog
A recent University of North Carolina Wilmington study tested whether general-purpose large language models could infer CVSS v3.1 base metrics using only CVE description text, across more than 31,000 vulnerabilities. The results show measurable progress, but they also expose a hard limit that matters far more than model selection: Model quality helps, but missing context sets a ceiling on reliability.
Read Post
Zenity

GreyNoise Findings: What This Means for AI Security

Jan 13, 2026 By Greg Zemlin In Zenity
Late last week, GreyNoise published one of the clearest signals we have seen that AI systems are no longer just research targets. They are operational targets. Their honeypot infrastructure captured 91,403 attack sessions between October 2025 and January 2026, revealing two distinct campaigns systematically mapping AI deployments at scale. This is a meaningful inflection point.
Read Post
veracode

Vibe Coding and GenAI Security: Balancing Speed with Risk

Jan 13, 2026 By Natalie Tischler In Veracode
If you think AI-generated code is saving you time and boosting productivity, you’re right. But here’s the problem: it’s also likely introducing security vulnerabilities. However, there are GenAI security practices that can be weaved into your workflow to help protect your apps. The software development landscape is shifting under our feet.
Read Post

Securing the Future of AI Browsing with 1Password and Perplexity

Jan 13, 2026 By 1Password In 1Password
Join Anand, VP of Product and AI at 1Password, and Kyle Polley from Perplexity for a fireside chat about building the future of secure, AI-native browsing. 1Password and Perplexity are partnering to bring privacy, transparency, and trust to the Comet Browser — the world’s first AI browser and personal assistant. Learn why security must be built in from the start, and how end-to-end encryption and zero-knowledge architecture protect users in the age of AI.
View Video

Is your organization actually AI-ready? #cybersecurity #aisecurity #ainews

Jan 13, 2026 By Teleport In Teleport
According to our CEO @Ev Kontsevoy, this isn't a "nice to have" anymore."It will be required if you don't want to fail." For the last two years, most companies have treated AI as an experiment. But as Ev explains in this clip, 2026 is the year AI graduates from the labs and enters production. This shift changes the requirements for everything – from how we secure identity, to who we hire. To help you navigate this transition, we’re breaking down Ev’s 2026 Cybersecurity Predictions.
View Video

Security Starts With Context: The 3 Signals That Actually Drive Change

Jan 13, 2026 By Reach Security In Reach Security
It's always a pleasure to sit down and chat with Ed. Good security decisions don’t start with alerts. They start with context. We rarely do anything in life without understanding some baseline of context. Otherwise, we're essentially "flying blind." Garrett breaks down the three signals that actually drive meaningful change:⇢ A clear baseline of how your environment really operates⇢ What’s happening in the outside threat landscape⇢ What your own history is already telling you in the context of your business.
View Video
Torq

Best AI SOC Platforms for 2026: How to Choose the Right One

Jan 13, 2026 By Torq In Torq
See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo If you are evaluating security platforms in 2026 based on which one has the best chatbot or can write a slightly better Python script for you, you’re fighting the last war. Attackers are already using AI to scale their operations with speed and precision. If your “AI SOC platform” is just a co-pilot that summarizes tickets while humans do all the work, you’re behind.
Read Post

Stop Ignoring This AI Bug! (Safety Security) #shorts

Jan 13, 2026 By Protecto In Protecto
Are you confusing AI Safety with AI Security? In this clip, we break down why AI is a "Socio-Technical" system and why that matters for your code. We ask the expert: How do you handle "Safety Bugs" (like bias) versus traditional "Security Bugs" (like hacks)? The answer might save your next project. Subscribe for more AI Security insights! @protectoai.
View Video
mend

LLM Red Teaming: Threats, Testing Process & Best Practices

Jan 13, 2026 By Tiffany Jennings In Mend
LLM red teaming is a proactive security practice that involves systematically testing large language models (LLMs) with adversarial inputs to find vulnerabilities before deployment. By using manual or automated methods to probe for weaknesses, red teamers can identify issues like harmful content generation, bias, or security exploits, which are then addressed through a continuous “break-fix” loop to improve the model’s safety and reliability.
Read Post
How X-Design's AI Agent Is Replacing Drag-and-Drop Branding Tools

How X-Design's AI Agent Is Replacing Drag-and-Drop Branding Tools

Jan 13, 2026 By SecuritySenses In SecuritySenses
The timeline for launching a brand has crashed. Two years ago, building an identity was a month-long slog of negotiations and revisions. Today, it happens in the afternoon. The old method of stitching together disjointed tools is dead; the market simply moves too fast for that.
Read Post
strongestlayer

StrongestLayer Research Finds Trusted Platforms Like DocuSign and Google Calendar Are Now the Primary Email Attack Surface

Jan 12, 2026 By StrongestLayer
77% of attacks impersonated business-critical brands such as DocuSign, Microsoft, and Google-platforms most organizations cannot afford to block.
Read Post
astra

Top 9 AI Security Tools in 2026 [Comprehensive Guide]

Jan 12, 2026 By Sanskriti Jain In Astra
AI-generated phishing emails now achieve a 54% click-through rate against just 12% for human-crafted messages. No, that is not a typo! With AI, attackers are now 4.5x more effective at breaching and bleeding your defences. Secondly, phishing attacks have surged by over 1,265% since ChatGPT’s launch in 2022, enabling cybercriminals to launch campaigns at unprecedented scales. The harsh reality?
Read Post
salt security

The MCP Security Blueprint: What a Hardened MCP Server Looks Like

Jan 12, 2026 By Eric Schwake In Salt Security
Over the last year, Model Context Protocol (MCP) servers have transitioned from "cool developer experiments" into critical production infrastructure. Developers love them because they allow AI agents to open tickets, query databases, and update records with almost zero integration backlog. But there is a fundamental truth we must acknowledge before moving forward: The AI revolution is actually an API revolution.
Read Post
Zenity

Advancing AI Security: Zenity's Contributions to MITRE ATLAS' First 2026 Update

Jan 12, 2026 By Andrew Silberman In Zenity
MITRE ATLAS has become a critical resource for cybersecurity leaders navigating the rapidly evolving world of AI-enabled systems.Traditional threat models are built for human-initiated workflows, APIs, and infrastructure, so they are no longer sufficient to describe modern AI attacks..
Read Post

A New Era for AI Coding? GPT 5.2 vs. Security Vulnerabilities

Jan 12, 2026 By Snyk In Snyk
Can OpenAI’s GPT 5.2 actually build a production-ready, secure application from a single prompt? In this video, we put the latest model to the test by asking it to build a full-stack Node.js note-taking app. We evaluate its dependency choices, dive into a surprising fix for a long-standing CSRF vulnerability, and run a full security audit using Snyk. Is this the new gold standard for AI coding models?
View Video

How AI is Re-Building the Cybersecurity Landscape with Max Lamothe-Brassard from LimaCharlie [280]

Jan 12, 2026 By LimaCharlie In LimaCharlie
On this episode of The Cybersecurity Defenders Podcast we're starting the new season off with the hottest topic of 2025: AI. Join an in-depth discussion January 20, 2026 and witness LimaCharlie's fundamentally different approach to AI-powered security operations. Sitting down with Maxime Lamothe-Brassard, Founder and CEO of LimaCharlie, we discuss the ways AI has rapidly changed how companies are building security tools.
View Video

PGA of America Trusts LevelBlue as Official Cybersecurity Advisor

Jan 12, 2026 By LevelBlue In LevelBlue
LevelBlue and the PGA of America share a commitment to excellence under pressure. As the Official Cybersecurity Advisor of the PGA of America, LevelBlue brings championship standards of protection, continuity, and trust to the organizations that keep the game - and business - moving forward. From fairways to firewalls, LevelBlue safeguards mission-critical operations, member data, and high-profile events with always-on defense, accelerated response, and expert-led security operations powered by AI-driven threat intelligence.
View Video

The Silent Killer in Security Stacks: Configuration Drift | Todd Graham x Garrett Hamilton

Jan 12, 2026 By Reach Security In Reach Security
The silent killer in modern security programs? Garrett Hamilton and Todd Graham discuss how the real killer is settings quietly slipping out of alignment over time — even in environments packed with “best-in-class” tools and clean audit results. Misconfigurations don’t announce themselves. They accumulate. They age. They slowly pull your security posture away from original intent. What teams think is “turned on” often isn’t enforced consistently — or at all. Without continuous validation, drift becomes invisible risk.
View Video
cultureai

AI 2026: A Look Ahead

Jan 12, 2026 By Oliver Simonnet In CultureAI
2026, the perfect time to reflect on how far technology has come and what lies ahead. Without a doubt, Artificial intelligence has gone from a niche to an omnipresent force, reshaping how we work, build, and defend. While organisations have speed-ran the adoption of AI and machine learning, cybercriminals have been just as fast to exploit them, and AI now powers business decisions, customer interactions, and – predictably – cyberattacks.
Read Post
cyberhaven

DSPM for AI: Securing Data in the Age of Artificial Intelligence

Jan 12, 2026 By Wil Tranchell In Cyberhaven
Organizations across industries are adopting AI at a rapid pace. From utilizing this newer technology to process data and conduct business-critical tasks to individual employees experimenting with Gen-AI to enhance their workflows, artificial intelligence now touches multiple points of an organization's operations.
Read Post
Zenity

Advancing MITRE ATLAS AI Security Through Zenity's Contributions

Jan 12, 2026 By Andrew Silberman In Zenity
MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) is a globally recognized AI security framework that catalogs adversarial techniques targeting artificial intelligence systems. Similar in structure to MITRE ATT&CK but purpose-built for AI, machine learning, and agentic systems, ATLAS translates abstract AI risks into concrete, actionable attack techniques that security teams can monitor and mitigate.
Read Post
CrowdStrike

AI Tool Poisoning: How Hidden Instructions Threaten AI Agents

Jan 9, 2026 By Vanessa Villa In CrowdStrike
As AI agents become increasingly prevalent across business environments, their security is a pressing concern. Among the insidious threats facing AI agents is tool poisoning, a type of attack that exploits the way AI agents interpret and use tool descriptions to guide their reasoning. In this blog, we explain how AI tool poisoning works, the different forms it can take, and how organizations can strengthen their defenses against this type of attack.
Read Post

Cyber Resilience, AI Threats & Business Impact: Findings from 2025 LevelBlue Futures Report

Jan 9, 2026 By LevelBlue In LevelBlue
Cyberattacks are evolving fast; powered by AI, deepfakes, ransomware, phishing, and growing software supply chain risk. So how prepared is your organization? In this webcast, we breakdown key findings from the 2025 LevelBlue Futures Report (in partnership with FT Longitude). The report is based on a global survey of 1,500 C-suite and senior executives across 16 countries and seven industries, including healthcare, financial services, energy, and manufacturing.
View Video

Jeremy Brown, CTO at GitGuardian, on AI, NonHuman Identities, and the Governance Gap in 2026

Jan 9, 2026 By GitGuardian In GitGuardian
AI isn’t creating new security problems, it’s exposing existing ones at scale. GitGuardian saw 24M secrets leaked on public GitHub last year (+25%), and private repos are far more likely to contain secrets because people get careless when they feel safe. AI also enables more non-developers to ship apps without security training and generates oversized PRs that can’t be realistically reviewed, increasing leak risk. Attackers increasingly don’t “hack”, they use leaked credentials to log in and blend in like normal users, making traditional incident response less effective.
View Video
astra

What is AI Security? The CTO's Guide to Securing LLMs & Models

Jan 8, 2026 By Shikhil Sharma In Astra
Here’s an unsettling truth: While 80% of organizations are adopting AI, only 6% have any form of AI security strategy in place (SandboxAQ 2025 AI Security Benchmark report). It’s like buying a Porsche 911 without locks or keys, a cash-guzzling public service car whose cost you’re apparently happy to bear.
Read Post
cato networks

Savanti: How Agentic AI Supercharge Cato's R&D Efficiency

Jan 8, 2026 By Dr. Guy Waizel In Cato Networks
Savanti is Cato Networks’ internal, agentic AI assistant that blends knowledge from Slack, Confluence, Git, and Jira to provide instant, context-rich answers. Savanti routes each query through an adaptive reasoning workflow by choosing between direct, deep, or multi-step reasoning based on the question’s complexity. Every answer is grounded in real internal context, backed by citations, and evaluated for confidence before being delivered.
Read Post
knowbe4

Defending Against Modern Email Threats With Layered, AI-Driven Security

Jan 8, 2026 By KnowBe4 Team In KnowBe4
Email has been the backbone of business communication for decades and as such, it remains the attacker’s favorite doorway into an organization. Phishing, Business Email Compromise (BEC) and supply-chain attacks continue to rise, with adversaries leveraging AI and compromised accounts to bypass legacy defenses. This presents many challenges for CISOs, IT Directors and SOC teams alike: it seems pretty clear that threats are evolving faster than traditional email security can keep up.
Read Post

Why the Target Breach Wasn't a Detection Failure - It Was Prioritization | Garrett Hamilton at UCI

Jan 8, 2026 By Reach Security In Reach Security
Nicole Perlroth asks Garrett how Reach's involvement would have impacted the breach with Target. Attackers came in through a third-party HVAC vendor. Credentials were compromised. Alerts fired. But nothing rose to the level of urgency it deserved. As Garrett Hamilton explains at UCI, this is where security breaks down—not detection, but prioritization. Most teams keep investing in reacting faster inside the SOC. The harder (and more effective) shift is upstream: reducing the exhaust before it ever hits the console.
View Video
levelblue

When AI Becomes the Insider Threat

Jan 8, 2026 By James Prince In LevelBlue
Remember that annoying ‘paperclip’ in Microsoft Word 97? The one that was always trying to help you…Fast forward nearly 30 years and we now have AI. In the race to adopt artificial intelligence, businesses are embedding AI systems into their daily operations, streamlining workflows, enhancing productivity, and centralizing knowledge. But what happens when that very system becomes an attacker’s most valuable asset?
Read Post
cyberark

Inside CyberArk Labs: the evolving risks in AI, browsers and OAuth

Jan 8, 2026 By Andy Thompson In CyberArk
In 2025, we saw attackers get bolder and smarter, using AI to amplify old tricks and invent new ones. The reality is, innovation cuts both ways. If you have tools, AI is going to make them even more dangerous. Last year proved that every leap forward in technology brings new risks right alongside the rewards. At CyberArk Labs, our mission is to uncover hidden vulnerabilities and provide actionable insights that help organizations fortify their defenses.
Read Post

How to Stop Sensitive Documents From Leaking in Slack, Gmail, and ChatGPT (Demo)

Jan 8, 2026 By Nightfall AI In Nightfall
Your security tools can detect credit card numbers, but they are blind to the files that actually matter. In this demo, we show how sensitive documents like: Internal source code Financial forecasts Performance reviews Customer lists are automatically detected and blocked in Slack, Google Drive, SharePoint, Gmail, and even ChatGPT using Nightfall’s new AI-powered file classifiers. No regex. No keywords. No training data.
View Video
CrowdStrike

CrowdStrike to Acquire SGNL to Secure Every Identity in the AI Era

Jan 8, 2026 By Michael Sentonas In CrowdStrike
I’m excited to announce CrowdStrike’s agreement to acquire SGNL, a leader in identity-first security. This acquisition will extend CrowdStrike Falcon Next-Gen Identity Security to deliver continuous, context-aware authorization for human, non-human, and AI agent identities across SaaS and hyperscaler cloud environments. As risk conditions and threats change, access to applications, data, and AI agents should change with them.
Read Post
protecto

How OWASP Top 10 Maps to Data Exposure Risks: 5 Hidden Threats Explained

Jan 8, 2026 By Protecto In Protecto
Most teams learn the OWASP Top 10 as a list of application security failures. Injection flaws. Broken access control. Security misconfiguration. Items to scan for, remediate, and close before the next audit or penetration test. But data exposure rarely arrives neatly packaged as a single OWASP finding. When sensitive data leaks, it is almost never because one category failed in isolation.
Read Post

The Media Mogul's Take: Cyber & Storytelling in the Age of AI

Jan 8, 2026 By SecurityScorecard In SecurityScorecard
Despite the connection with Robert De Niro, we won’t be spoiling Zero Day for you yet. But there is a large intersection between the future of media, cybersecurity, and AI, and we’re excited to jump into it! Join Aleksandr Yampolskiy (CEO & Co-Founder, SecurityScorecard) and Sandy Climan (President, Entertainment Media Ventures, Inc.) in this webinar, where they chat about: SecurityScorecard monitors and scores over 12 million companies worldwide.
View Video
cato networks

Cato's ASK AI Assistant: Turning Complex Network Operations Into Simple Conversations

Jan 7, 2026 By Dr. Guy Waizel In Cato Networks
Every superhero needs a sidekick. For your network and security teams, that is Cato’s ASK AI Assistant, our new AI Assistant built to help you see, solve, and secure faster than ever. This isn’t a basic Q&A tool. It brings customer-specific information and ability to work with other tools to answer complex questions.
Read Post
graylog

Why AI Transformations in Security Fail Like New Year's Gym Resolutions

Jan 7, 2026 By The Graylog Product Team In Graylog
Enterprise AI adoption moved fast. Speed mattered. Shipping mattered. Getting AI into production mattered. That phase is over. Security leaders are now asking a harder question: whether the AI already embedded in security operations is safe, explainable, and aligned with how modern SOC teams actually work. The focus has shifted from adoption to trust, specifically explainability, governance, and operational fit.
Read Post
acronis

AI Automation for MSPs: Boost Productivity, Cut Costs, and Improve Service Quality

Jan 7, 2026 By Acronis In Acronis
AI automation for managed service providers is creating a major shift from reactive to proactive service delivery, allowing MSPs to streamline ticket handling, accelerate resolution times, and operate far more efficiently. Real-world data shows that AI-driven automation can help service desks close significantly more tickets per technician by automating triage and routine tasks, while also reducing operational costs by 25 to 40 percent** through improved workflow efficiency and reduced manual labor.
Read Post
Snyk

Secure by Default: Why Snyk and Augment Code are the New Standard for AI Development

Jan 7, 2026 By Lindsay Kitendaugh In Snyk
AI coding assistants have fundamentally changed development velocity. With tools like Augment Code, developers can now build and iterate at a pace that was unimaginable just a few years ago. However, this explosion in speed has created a new challenge: security teams, often still relying on manual review processes, are becoming the bottleneck.
Read Post

AI Compliance Training: EU AI Act & 90-Day Implementation Strategy

Jan 7, 2026 By KnowBe4 | Human Risk Management In KnowBe4
Executive Summary: A technical briefing on navigating the AI compliance landscape, focusing on the EU AI Act, US federal mandates, and state-level regulations. This session provides a structured 90-day roadmap for AI system governance, risk mitigation, and role-based training deployment. Key Knowledge Domains.
View Video
The Legitimate Bot Traffic Security Teams Can No Longer Overlook

The Legitimate Bot Traffic Security Teams Can No Longer Overlook

Jan 7, 2026 By SecuritySenses In SecuritySenses
Security teams have spent years refining their ability to detect and stop malicious bots. That work remains critical. Automated traffic now accounts for more than half of all web traffic, according to Imperva's 2025 Bad Bot Report. What has changed is the scale and influence of legitimate bots and the blind spots they introduce into modern security programs.
Read Post
Exabeam Introduces First Connected System for AI Agent Behavior Analytics and AI Security Posture Insight

Exabeam Introduces First Connected System for AI Agent Behavior Analytics and AI Security Posture Insight

Jan 6, 2026 By Exabeam In Exabeam
Industry leadership expanded with connected capabilities that not only uncover AI agent activity, but centralize investigation, and deliver measurable AI security posture insights.
Read Post
knowbe4

When Seeing Isn't Believing: AI Images, Breaking News and the New Misinformation Playbook

Jan 6, 2026 By KnowBe4 Team In KnowBe4
In the early hours following reports of a U.S. military operation involving Venezuela, social media feeds were flooded with dramatic images and videos that appeared to show the capture of Venezuelan president Nicolás Maduro. Within minutes, AI-generated photos of Maduro being escorted by U.S. law enforcement, scenes of missiles striking Caracas, and crowds celebrating in the streets racked up millions of views across various social media channels. The problem?
Read Post
levelblue

AI-Enabled Cyber Intrusions: What Two Recent Incidents Reveal for Corporate Counsel

Jan 6, 2026 By Daniel Ilan et al. In LevelBlue
This article was authored by Daniel Ilan, Rahul Mukhi, Prudence Buckland, and Melissa Faragasso from Cleary Gottlieb, and Brian Lichter and Elijah Seymour from Stroz Friedberg, a LevelBlue company. Recent disclosures by Anthropic and OpenAI highlight a pivotal shift in the cyber threat landscape: AI is no longer merely a tool that aids attackers, in some cases, it has become the attacker itself.
Read Post
vanta

Why AI security looks different across the UK, France, Germany, and Australia

Jan 6, 2026 By Vanta In Vanta
Globally, 88% of companies regularly use AI in at least one business function—a 10% increase from the previous year. But as organizations race to adopt new capabilities, we’ve found that the rigor and maturity of AI governance vary widely by region. ‍ The third edition of our State of Trust report reveals how leading AI adopters outside the U.S.—from the UK to Germany, France, and Australia—are approaching AI security and governance in distinct ways.
Read Post
salt security

The Silent Threat to the Agentic Enterprise: Why BOLA is the #1 Risk for AI Agents

Jan 6, 2026 By Eric Schwake In Salt Security
In the race to deploy autonomous AI agents, organizations are inadvertently building on a foundation of shifting sand. While security teams have spent the last year focused on "Prompt Injection" and "Model Poisoning," a much older, more dangerous adversary has quietly become the primary attack vector for the agentic era: Broken Object Level Authorization (BOLA).
Read Post
exabeam

Model Context Protocol Server: The Universal Remote for AI Agents

Jan 6, 2026 By Exabeam In Exabeam
The Model Context Protocol (MCP) is emerging as a foundational interoperability layer for agentic AI, embraced by major platform providers. MCP simplifies how AI models connect to external tools and data. Think of it as a universal remote for security platforms: Instead of building fragile, one-off integrations, MCP allows AI to discover and use capabilities dynamically. For SIEM and detection providers, this shift is significant.
Read Post
cyberark

Will AI agents 'get real' in 2026?

Jan 6, 2026 By Kaitlin Harvey In CyberArk
In my house, we consume a lot of AI research. We also watch a lot—probably too much—TV. Late in 2025, those worlds collided when the AI giant Anthropic was featured on “60 Minutes.” My husband tried to scroll past it, but I snatched the controller away, unable to resist a headline calling out the first widely acknowledged case of an “agentic AI cyberattack.” The framing itself was irresistible, a milestone moment in the rapid acceleration of AI.
Read Post

Agentic AI Security: How Microsoft Prevents Autonomous Agent Attacks?

Jan 6, 2026 By Protecto In Protecto
As agentic AI systems move into the mainstream—powered by tool calling, MCP, and autonomous workflows—security is no longer a “nice to have.” It’s mission-critical. In this episode, we sit down with Raji, Principal Engineer & Manager for AI and Safety at Microsoft, to deep-dive into the rapidly evolving world of AI security, autonomous agents, and enterprise governance. Discover how Microsoft identifies and mitigates risks in agentic AI, distinguishes AI Security vs AI Safety, and enables organizations to deploy autonomous systems safely at scale—without slowing innovation.
View Video

Secrets in the Machine: Preventing Sensitive Data Leaks Through LLM APIs

Jan 6, 2026 By GitGuardian In GitGuardian
In this webinar, we break down a simple but increasingly common problem: secrets leak wherever text flows, and modern LLM apps and agentic workflows are built to move text fast. We walk through concrete demos showing how API keys and passwords can surface through RAG-based assistants when secrets accidentally live in knowledge bases (tickets, docs, internal wikis). We also show why “just harden the system prompt” isn’t a reliable fix, and how output-only redaction can be bypassed (for example by simple formatting/encoding tricks). Most importantly, we explore real-world agent architectures.
View Video
AI Customer Service: Revolutionizing Customer Experiences

AI Customer Service: Revolutionizing Customer Experiences

Jan 6, 2026 By SecuritySenses In SecuritySenses
In today's fast-paced business world, providing exceptional customer support is no longer just a competitive advantage-it's a necessity. Companies increasingly turn to AI customer service solutions to meet rising customer expectations while optimizing operational efficiency. At Mindy Support, we specialize in combining cutting-edge artificial intelligence with human expertise to deliver seamless customer interactions. Our AI-driven tools enable businesses to handle inquiries promptly, provide personalized assistance, and maintain consistent quality across all communication channels.
Read Post
Featured Post
Same Mission, Different Mindsets: CISOs and Incident Response Leaders in the Age of AI and Automation

Same Mission, Different Mindsets: CISOs and Incident Response Leaders in the Age of AI and Automation

Jan 5, 2026 By Leon Ward, Chief Transformational Officer In Securonix
When you work in cybersecurity, whether you're steering the operational team, or in a more strategic role, the mission is the same: protect the business. But when it comes to executing that mission, finding consensus on the best approach can be hard. At this pivotal point in the evolution of cybersecurity, as automation becomes table stakes and AI adoption accelerates, it is important that stakeholders are pulling in the same direction. However, recent ThreatQuotient research highlights real differences in how CISOs and Heads of IR approach the introduction of AI into cybersecurity strategy and practice.
Read Post
CrowdStrike

CrowdStrike's Journey in Customizing NVIDIA Nemotron Models for Peak Accuracy and Performance

Jan 5, 2026 By Ioana Croitoru - Sophie Chau - Roxana Boriceanu - Chase Midler In CrowdStrike
Today’s security teams need AI models that can reason over massive telemetry and support autonomous actions. At CrowdStrike, we're working closely with NVIDIA to operationalize NVIDIA Nemotron open models1, building on our existing integration of Nemotron on Amazon Bedrock within the CrowdStrike Falcon platform. This collaboration enables us to rigorously test and adapt large language models (LLMs) for security-specific workloads while maintaining production-grade performance and security.
Read Post
keeper

How the Model Context Protocol Is Redefining Zero Trust for AI Agents

Jan 5, 2026 By Ashley D'Andrea In Keeper
As Artificial Intelligence (AI) agents become more autonomous by accessing critical systems and acting without real-time human oversight, they are evolving from productivity tools into active Non-Human Identities (NHIs) like service accounts or API keys that require the same oversight and controls as human users. This shift expands organizational attack surfaces, introducing new security risks related to overprivileged access and lateral movement of NHIs across cloud infrastructure.
Read Post
protecto

Unlocking AI Data Security: Strategic Solutions

Jan 5, 2026 By Anwita In Protecto
AI systems are no longer experimental. They sit at the center of product experiences, internal workflows, and customer-facing automation. As soon as an AI feature ships, it starts handling real data. Customer messages. Internal documents. Support tickets. Logs. Training samples. That’s when AI data security stops being an abstract concern and becomes a product requirement.
Read Post

Eliminate AppSec Noise: Jit's AI Agents Find Real Exploitable Risks

Jan 5, 2026 By Jit In Jit
Application security scanners generate endless alerts, but most don’t translate into real risk. Meet Sera, Jit’s AI-powered Security Evaluation and Remediation Agent. Sera automatically connects scanner findings, uncovers toxic combinations, and explains exploitable attack paths—saving AppSec teams hours of manual investigation. See how AI Agents eliminate noise, automate investigations, and deliver clarity so your team can focus on what matters.
View Video

Microsoft E3 vs E5: Understanding the Security Coverage You Already Own

Jan 5, 2026 By Reach Security In Reach Security
Assessing Microsoft E3 and E5 is less about the license tier and more about understanding the security coverage you already own. In our conversation, Todd and Garrett break down what often gets missed in the E3 → E5 journey: Organizations move to E5 without clearly understanding:⇢ what coverage they already have with E3⇢ what incremental capabilities E5 actually adds⇢ and whether those capabilities are being adopted at all.
View Video
How Technology Revolutionizes Medical Document Translation

How Technology Revolutionizes Medical Document Translation

Jan 4, 2026 By SecuritySenses In SecuritySenses
Are you also a medical worker struggling with traditional documentation? Technology augments and advances are making medical document translation increasingly significant and influential, helping healthcare workers, patients, and researchers to communicate across languages.
Read Post

Principles in Practice: Raw credentials should never be shared with LLMs

Jan 2, 2026 By 1Password In 1Password
If you wouldn’t hand your house keys to a delivery driver, why hand your credentials to AI? In this Principles in Practice video, Anand Srinivas, VP of Product & AI at 1Password, explains a critical rule for secure AI use: Raw credentials should never be shared with large language models. Instead of sharing secrets, use them securely: Don’t send raw credentials over the data channel of a protocol like MCP Use proxies and secure autofill instead of sharing secrets Keep credentials out of prompts, embeddings, and fine-tuning data.
View Video

AI and the Vanishing Entry Level Security Jobs in 2025

Jan 1, 2026 By Razorthorn Security In Razorthorn
The Razorwire Christmas Party 2025 episode compares automation in law and cybersecurity, where junior roles shrink and the talent pipeline starts to break. AI pressure on tier one soc work in 2025 leaves new entrants with debt and fewer real training grounds, raising hard questions about the future of senior expertise.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.